Roberto Sassu <roberto.sassu@xxxxxxxxxx> wrote: > - switch from session to user keyring (Roberto Sassu) > - search user keyring only if no keyring was provided, so that the > trustworthiness of the signature depends on the type of keyring > containing the key used for signature verification (Roberto Sassu) Er. No. You should search the session keyring. This may contain a link to the user keyring (pam_keyinit emplaces one). You need to consider what it is that the patch trying to achieve. David